Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/203DB338782111EEAFDDBD86C4F9AE02.roa
File: 203DB338782111EEAFDDBD86C4F9AE02.roa (raw, json)
Hash identifier: bl0GHKiC7T7tXaNRCpxkPx+K/rr5owVX0QnJL/3VOow=
Subject key identifier: 42:22:6F:7F:11:70:EE:5B:F5:5D:66:42:36:C6:55:F8:5C:8C:33:03
Certificate issuer: /CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
Certificate serial: 2E
Authority key identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/203DB338782111EEAFDDBD86C4F9AE02.roa
Signing time: Sat 06 Jan 2024 19:57:36 +0000
ROA not before: Sat 06 Jan 2024 19:57:36 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 8739
IP address blocks: 37.139.131.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
Validity
Not Before: Jan 6 19:57:36 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6599b0b0-dcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ce:47:84:b7:12:fb:77:06:a6:33:79:dc:b5:
05:c6:ad:f8:c6:ac:99:03:da:fe:5b:ec:5f:d5:04:
d1:fd:a9:f0:24:84:b9:0e:23:b2:96:25:34:14:c7:
cf:77:9b:47:92:a4:1b:7d:04:af:cc:9d:92:0a:df:
3a:55:ae:2c:31:62:2d:f3:6b:f0:4b:90:16:09:eb:
72:18:d4:b9:a7:ed:67:aa:3e:9b:67:f6:a5:c3:ed:
12:6b:eb:49:97:b7:da:cc:5c:37:18:07:41:26:92:
c6:10:21:9c:89:cb:0b:cb:a7:20:66:51:e6:ed:bb:
f2:cf:b6:db:46:68:8d:98:9e:6b:8f:c6:b3:53:11:
14:80:29:62:3d:d0:a7:be:9a:ca:f2:50:35:b3:17:
09:00:7a:84:5c:4d:42:c8:a4:39:9a:94:11:df:46:
34:7c:7d:65:5d:7a:91:14:20:19:8b:78:21:f1:7f:
46:19:f6:a4:cf:cf:df:53:12:a3:08:45:bc:ea:4d:
ec:e6:b4:db:4b:15:f9:88:ca:e8:a9:11:b7:12:86:
c6:32:ab:ef:79:ea:93:ea:93:ac:9f:80:14:0d:b8:
94:29:87:87:1b:13:96:5f:c6:a3:3d:b5:02:7d:90:
e2:d0:34:4a:3a:a7:e9:f8:92:e7:04:c7:e5:be:2b:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:22:6F:7F:11:70:EE:5B:F5:5D:66:42:36:C6:55:F8:5C:8C:33:03
X509v3 Authority Key Identifier:
keyid:94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/203DB338782111EEAFDDBD86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
37.139.131.0/24
193.47.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:70:10:86:ee:cc:2c:e2:50:e1:33:4f:5e:1e:4b:8d:2c:c1:
bc:4a:36:ca:9c:c2:1a:e1:8c:08:63:03:a7:77:fd:6e:27:3f:
5d:92:8f:d1:d2:c0:3c:71:ef:31:d5:b1:f8:a7:5d:f4:e0:99:
26:c1:bd:5c:25:e9:13:c7:69:6e:08:e8:85:5b:5d:5e:a9:8e:
70:20:ab:c6:8e:60:96:92:1e:5f:d6:15:02:07:98:bd:78:70:
a6:b2:bf:af:81:c4:e5:d5:77:bb:ca:ae:d2:58:12:c3:0d:75:
f4:0d:52:c7:10:3c:fa:69:bd:7b:bb:13:07:f8:8e:50:d9:41:
65:8d:f0:a4:22:d0:42:94:64:04:ef:6f:ef:d5:0a:7c:a8:63:
7f:7e:e3:b6:04:bd:e2:d6:95:f5:dd:60:86:54:b4:d9:90:53:
e8:aa:a5:fa:3d:6f:80:24:3e:f1:97:2b:d9:68:7a:d8:8f:fb:
43:97:b0:59:cf:57:02:4c:5b:b8:2c:d8:34:77:97:8f:0d:8b:
cd:c9:be:1c:ce:fa:21:ed:34:5f:a9:07:47:95:64:b5:f5:83:
82:02:17:ee:14:ec:6c:21:a5:8f:f7:0e:6d:50:bb:fb:6e:82:
d1:98:84:fd:82:27:ee:19:31:34:32:07:53:ca:04:cb:85:46:
10:f3:a4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:56:20 2025 by rpki-client